Re: Odd SHA1 Results

[Steve McIntyre <steve@einval.com>]

On Sat, May 24, 2008 at 12:36:55PM +0100, Steve McIntyre wrote:
>On Sat, May 24, 2008 at 05:36:00AM -0500, Geoff Fitton wrote:
>>-----BEGIN PGP SIGNED MESSAGE-----
>>Hash: SHA1
>>
>>My checksums:
>>25413f9f9396dca81768ef892aa05f64f5eb9484  debian-testing-i386-kde-
>>CD-1.iso
>>77c5228098ed1fcb4953170178d266a3  debian-testing-i386-kde-CD-1.iso
>>
>>Published:
>>http://cdimage.debian.org/cdimage/weekly-builds/i386/iso-cd/SHA1SUMS
>>22bde173bfbd22b803fd9feffb5d03a097333a37  debian-testing-i386-kde-
>>CD-1.iso
>>http://cdimage.debian.org/cdimage/weekly-builds/i386/iso-cd/MD5SUMS
>>77c5228098ed1fcb4953170178d266a3  debian-testing-i386-kde-CD-1.iso
>>
>>The MD5sum agrees and the SHA1 does not. Is this an MD5 collision
>>or merely a typo?
>
>There's a mistake in the SHA1 sums, I'm checking on that now.

Found and fixed. The sha1 code I added to genisoimage had a silly type
bug on 64-bit platforms. The recent change to amd64 for the CD build
machine was the trigger that showed this happening. I've just fixed
the bug and replaced the genisoimage binary on farbror so this should
be sorted for builds from now on.

Thanks for the bug report!

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
Google-bait:       http://www.debian.org/CD/free-linux-cd
  Debian does NOT ship free CDs. Please do NOT contact the mailing
  lists asking us to send them to you.